6d - web applications with ca 2e and websydian expressplex2e.com/downloads/6d - web applications...

Web Applications with CA 2E and WebsydianExpress Develop and DeployDevelop and Deploy

Søren MadsenAnne-Marie Arnvig

4th CA 2E/Plex Worldwide Developer Conference

Websydian A/Sy

• Founded in 1985

• Headquarters in Copenhagen, Denmark

• Using CA 2E since 1989Using CA 2E since 1989

• Using CA Plex since 1994

• 100% dedicated to model based development working• 100% dedicated to model-based development – working smarter not harder

• More than 200 customers in 35 countries worldwide

• First version of Websydian was released 1998

• First version of WebsydianExpress was released 2005 y p


Websydian A/Sy

CA d W b di A/S t t i t i• CA and Websydian A/S are strategic partners in delivering complete solutions since 2000. The goal is to handle the challenges of quick and reliable g qdevelopment of robust and secure Web, Wireless and Web Service Applications.

• Websydian target the Java, Windows and IBM System i (the former AS400) platforms( ) p


OHH1 Websydian now has more than 200 customers in more than 30 countries and still growing

Punktum efter 2001Ole Høegh Hansen, 4/15/2005

Agendag

• Websydian focus

• A flatter, smaller and faster world

• What are you up against

• 2E and web – what you need

• A closer look at security and usabilityy y

• Making ”faster” concrete

• Websydian benefits out-of-the-boxWebsydian benefits out of the box

• Live demo: linking 2E and WebsydianExpress


Websydian focus: work smarter

• We have been involved with CA 2E from the start

• We know the needs of 2E developers

• We build WebsydianExpress based on experience andWe build WebsydianExpress based on experience and feedback

• We extracted the best of all and put it into WE


A flatter, smaller and faster world

• Web casts, remote connections, e-conferences, ,

• Non-stop change is the new normal

• Demand for speed and adjustment to changeDemand for speed and adjustment to change


What are you up against? y p g

• What does it take to transform your 2E applications intoy ppweb applications if you start from scratch?

• What do you need to learn?• What options do you need to consider, evaluate and

choose between? • What do you need to develop yourselves?• What do you need to develop yourselves?


2E and web – what you need

• URL W b it d i• Web site design

• Menus • Login

User interface

• Login

• Security • User management • Administration • 2E system functionality


A closer look at two issues

• Securityy• Usability


Securityy

Web applications: Access isBack-ends: You control Web applications: Access is difficult to control

Back-ends: You control access


Usability

Everyone everywhere is a potential user of your systemyour system

and of your competitors!

Make it easy for them to come to youcome to you.

Make it easy for yourself to invite them.


Must haves

Security U t t b• User management system - web

• Login and roles • Session control• Session control

Usability (Customers)

• Understandable menus, work flow and activators

Usability (for you)Usability (for you)

• Easy admin and maintenance of your web application


Making ”faster” concreteg

• How long will it take to before you can focus on the g yfunctionality of your web site if you don’t use Websydian to web front your 2E application ? 1000 hours? 2000 hours? or more?or more?

• How long will take if you use WebsydianExpress? 50How long will take if you use WebsydianExpress? 50 hours? 20 hours? or less?


Websydian benefits out-of-the-boxy

What you get out-of-the-box is an entire infrastructure and a ready site which means that:

• You don’t have to use time collecting and evaluating information about how to go about creating a web solution before starting – we have done it for you

• You can reuse the application you already have• You can focus on the business functionality right after installation• You don’t have to use time setting up security measures it’s• You don t have to use time setting up security measures – it s

already done• Genric features: menu, login, user management, language support• Web based user administration• Years of experience


You get

Usability:Web site out of the box• Web site out of the box

• Installation Service• Administration module • Message log • User management

C t Fi ld ( d )• Custom Fields (you can grow your needs)• Page Modeler – generates HTML code • Language support for multiple language sitesLanguage support for multiple language sites • Interface between your back-end apps and the web (APIs)


You get

Security:Security:• Session control• User management systemUser management system• Login facility • Role system compliant with J2EE


Websydian Security Model


OWASP

OWASP (Open Web Application Security Project)– Non-profit organization– Community for sharing information about web

application securityapplication security

The OWASP Top Ten– The 10 most critical web application security flaws– How to avoid the security flaws

httt://www.owasp.org


OWASP 2006 Top Ten

1. Un-validated Parameters2 Broken Access Control2. Broken Access Control3. Broken Account and Session Management4. Cross-Site Scripting Flawsp g5. Buffer Overflows6. Command Injection Flaws7. Error Handling Problems8. Insecure Storage - Insecure Use of Cryptography9 A li i D i l f S i9. Application Denial of Service10. Insecure Configuration Management- Server mis-

configurationconfiguration


OWASP 2006 Top Ten and Websydian

Un-validated Parameters Broken Access Control Broken Access Control Broken Account and Session Management Cross-Site Scripting Flawsp g Buffer Overflows Command Injection Flaws Error Handling Problems Insecure storage - Insecure Use of Cryptography A li ti D i l f S i ! Application Denial of Service !• Insecure Configuration Management- Server mis-

configurationconfiguration


Role based Security Model

• Role e.g. SalesRep, Accountant, Customer

• Role-based security obtained through a combination of two security methods:

• Security by Declaration– Access privileges declared by role rse access the ccess p eges dec a ed by o e se access e

declarations to obtain Programmatic security– If <user> in <role> then…– If <user> equal to <user id> then…q _


End Part 1


WebsydianExpress for CA 2EWebsydianExpress for CA 2E

Soren Madsen


Biographyog ap y

• Søren Madsen• Soft Design A/S• Chief Consultant

– Worked with CA 2E since 1990 – CA Plex since 1996

• Speaker at:Speaker at:– CA WORLD and Plex/2E user conferences since 2004– COMMON US since 2007


• Søren Madsen• Softdesign since 1990• Senior Consultant, Project manager• Synon 8 years

2e– 2e

• PLEX 8-9 yearsKT– KT

– Obsydian– Cool:Plex

J i Pl– Jasmin:Plex– Advantage:Plex– AllFusion:Plex


Developing for Websydian Expresse e op g o ebsyd a p ess

AllFusion 2EiSeries,

ILE RPGiSeries

AllFusion PlexiSeries, Windows

You choose!You choose!


Similarities between 2E and WebS a t es bet ee a d eb2E Websydian/2E

DisplayRecord

Display HorseEXCEXTFUN

RPG DDS RPG HTML


Similarities between 2E and Web

Scr/rpt design = Page modeler


Page Modeler: Easy creation of HTML


Run-time Page Generation

RPG

The “RPG Program” Loads the DDS via the definition as an externally described file. Assigns the variables and writes to e ss g s t e a ab es a d tes to5250


Run-time Page Generationu t e age Ge e at o

RPG

The “RPG Program” reads the HTML file as an external file. Assigns the variables and writes to the browsera d tes to t e b o se


Run-time Page Generationu t e age Ge e at o

Substitution at run-time of fields in Details region

• Values of Details-fields set by “SetOutput function”

• Result is generated HTML Page

• HTML Document Template as input to “WritePage Function”HTML Document Template as input to WritePage Function


Live Demo


Websydian for 2E Demoebsyd a o e o


The Websydian Express 2E API (43)e ebsyd a p ess ( 3)


Application flowpp cat o o

- GetInput(field name) p ( )– (Get values from input fields, one call per field)

- Execute business logic– (E.g. database update etc.)

- SetOutput(field name, field value)(S f )– (Set output values, one call per field)

- SetParm(Eventid, field name, field value)(Set hidden values one call per field)– (Set hidden values, one call per field)

- WritePage(html template)


Show horse FunctionsS o o se u ct o s


What now ?at o

The 2E model you can download contains all the AD code to view position create update and delete data in the Horseview, position, create, update and delete data in the Horse entity.

And you can build any web functionality using your own 2E entities and functions.

This can be tried out for free !

More information at: www websydian comMore information at: www.websydian.com


WebsydianExpress summaryebsyd a p ess su a y

• WebsydianExpress saves you hours of work• WebsydianExpress saves you hours of work• Provides web site out-of-the-box• Internet profiles handled by Websydian Express• Batch processing (reduces number of interactive users)• Handles user management • Provides session management out of the box• Provides session management out-of-the-box• Provides the necessary APIs for developing web using 2E• Easy installationy• Provides a tool for modeling the web pages• Enables efficient use of different development skills


6d - web applications with ca 2e and websydian expressplex2e.com/downloads/6d - web applications...

Documents